home

afa4ca3c30d9b75b8936989cc25950c6.exe

Supersoft

The application afa4ca3c30d9b75b8936989cc25950c6.exe by Supersoft has been detected as adware by 23 anti-malware scanners. Accoriding to the detections, this has been classified as a kyelogger which is capable of recoring a user's keystrokes.
Publisher:
Supersoft  (signed and verified)

MD5:
afa4ca3c30d9b75b8936989cc25950c6

SHA-1:
19d3c6321051481da83981ed2070d350243d2be1

SHA-256:
977a0d9cd01b5f6e065bbd1666890f9046747e4e8470b17253eb7868153bb246

Scanner detections:
23 / 68

Status:
Adware

Analysis date:
4/26/2024 9:35:49 AM UTC  (today)

Scan engine
Detection
Engine version

Lavasoft Ad-Aware
Trojan.GenericKD.1762473
915

AhnLab V3 Security
Trojan/Win32.Inject
2014.07.18

Avira AntiVirus
TR/Dropper.MSIL.67452
7.11.162.42

AVG
MSIL4
2015.0.3393

Baidu Antivirus
Trojan.MSIL.Injector
4.0.3.1484

Bitdefender
Trojan.GenericKD.1762473
1.0.20.1080

Dr.Web
Trojan.KeyLogger.25348
9.0.1.0216

Emsisoft Anti-Malware
Trojan.MSIL.Injector
8.14.08.04.07

ESET NOD32
MSIL/Injector.EJD (variant)
8.10113

G Data
Trojan.GenericKD.1762473
14.8.24

IKARUS anti.virus
Trojan.MSIL.Injector
t3scan.1.6.1.0

K7 AntiVirus
Trojan
13.180.12763

Kaspersky
Trojan.MSIL.Crypt
14.0.0.3458

Malwarebytes
Trojan.Inject
v2014.08.04.07

McAfee
RDN/Generic.dx!ddz
5600.7049

MicroWorld eScan
Trojan.GenericKD.1762473
15.0.0.648

NANO AntiVirus
Trojan.Win32.Crypt.dcicnv
0.28.2.60881

Norman
Suspicious_Gen4.GTQMW
11.20140804

Panda Antivirus
Trj/CI.A
14.08.04.07

Qihoo 360 Security
HEUR/Malware.QVM03.Gen
1.0.0.1015

Reason Heuristics
PUP.Supersoft.a
14.8.4.7

Sophos
Mal/Cleaman-B
4.98

Trend Micro House Call
TROJ_GEN.R047H08GG14
7.2.216

File size:
361.7 KB (370,408 bytes)

File type:
Executable application (Win32 EXE)

Common path:
C:\users\{user}\downloads\afa4ca3c30d9b75b8936989cc25950c6.exe

Digital Signature
Signed by:
Supersoft

Authority:
Supersoft

Valid from:
9/30/2012 10:26:38 AM

Valid to:
1/1/2040 12:59:59 AM

Subject:
CN=Supersoft

Issuer:
CN=Supersoft

Serial number:
6B50254A40C7CFB14A405056B8F04272

File PE Metadata
Compilation timestamp:
7/15/2014 7:31:02 AM

OS version:
4.0

OS bitness:
Win32

Subsystem:
Windows GUI

Linker version:
8.0

.NET CLR dependent:
Yes

CTPH (ssdeep):
6144:YAo0U2I7WODlfghxSY2p4TJnPjZHPOQEj16jh/MOAUMUimCsU7JYIW:GKvxSo0LjIjh/hCsU7JFW

Entry address:
0x5A85E

Entry point:
FF, 25, 00, 20, 40, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00, 00...
 
[+]

Developed / compiled with:
Microsoft Visual C# / Basic .NET

Code size:
354.5 KB (363,008 bytes)

Remove afa4ca3c30d9b75b8936989cc25950c6.exe - Powered by Reason Core Security
herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.